Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/c2f1c48f7c6cccae7bd10e4838e536e48e743a5b.roa
File:                     c2f1c48f7c6cccae7bd10e4838e536e48e743a5b.roa (raw, json)
Hash identifier:          vIz7/6XiBqsxmxWXvWJeN2BEpOKtNMF2kK8mDaIngbA=
Subject key identifier:   69:7C:46:4B:33:F2:30:11:6E:F4:5F:BA:A9:DA:E7:3E:E6:C0:62:AD
Certificate issuer:       /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial:       218843
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/c2f1c48f7c6cccae7bd10e4838e536e48e743a5b.roa
Signing time:             Thu 15 Jun 2023 18:05:09 +0000
ROA not before:           Wed 14 Jun 2023 18:05:09 +0000
ROA not after:            Sun 15 Jun 2025 18:05:09 +0000
asID:                     12150
IP address blocks:        170.84.44.0/22 maxlen: 24
                          200.59.0.0/20 maxlen: 24
                          200.61.240.0/21 maxlen: 24
                          143.0.244.0/22 maxlen: 24
                          179.60.196.0/22 maxlen: 24
                          2803:e080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197571 (0x218843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
        Validity
            Not Before: Jun 14 18:05:09 2023 GMT
            Not After : Jun 15 18:05:09 2025 GMT
        Subject: CN=c2f1c48f7c6cccae7bd10e4838e536e48e743a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:11:08:11:ec:92:c9:82:d0:90:33:a4:95:
                    fc:28:5b:7c:ae:6d:fb:bf:38:4d:f4:bd:c2:a6:ce:
                    a8:85:f7:16:5d:1e:4d:b9:61:2b:7b:ab:35:38:04:
                    36:09:cb:24:51:4d:05:2c:7f:29:84:63:9c:24:4b:
                    96:57:1e:82:e6:de:47:95:44:7f:7a:3a:36:aa:ef:
                    da:83:08:b6:b5:f1:8f:89:b9:0f:d3:e4:38:c9:08:
                    3b:da:1d:9c:cd:55:eb:5a:53:f6:3a:ae:3d:f3:04:
                    fd:97:e2:c2:c3:96:c1:92:ba:84:14:8e:02:2d:71:
                    2f:e4:a2:1a:18:0d:93:7f:24:17:4e:50:c8:12:f9:
                    5f:5d:07:09:32:50:7f:a2:be:2f:d2:62:3d:63:d3:
                    0c:f3:7c:c0:b7:97:f3:57:c9:96:1c:83:96:81:76:
                    e2:a7:b6:f2:22:d5:97:ea:59:45:d7:02:d6:7c:08:
                    b4:df:b8:de:d6:09:e1:f8:3f:a0:ed:26:6d:a3:9c:
                    64:f6:90:14:61:ef:81:72:79:74:65:50:3c:c3:c3:
                    60:7f:64:2e:11:a1:2b:e7:01:21:08:9b:e8:d5:38:
                    e7:99:e6:3e:82:95:37:e6:50:64:9e:8b:87:31:0f:
                    6b:a1:da:0d:eb:8e:9f:56:e3:1c:ac:4a:4c:22:b0:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:46:4B:33:F2:30:11:6E:F4:5F:BA:A9:DA:E7:3E:E6:C0:62:AD
            X509v3 Authority Key Identifier:
                keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/c2f1c48f7c6cccae7bd10e4838e536e48e743a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.244.0/22
                  170.84.44.0/22
                  179.60.196.0/22
                  200.59.0.0/20
                  200.61.240.0/21
                IPv6:
                  2803:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:41:52:12:ba:fc:11:74:d7:64:78:f9:1c:37:6b:5f:f9:fc:
         72:3e:7e:20:8a:3c:dc:d8:44:e1:53:b2:2b:e1:ef:aa:88:d8:
         20:a1:a8:72:78:dc:aa:8b:cd:07:fb:f6:34:1f:f4:06:98:43:
         5f:ca:dc:d7:6f:71:73:21:c2:be:f6:33:87:ab:d8:7a:ea:38:
         f1:db:c8:3e:1c:8b:5d:98:c2:21:96:a8:0f:4e:b5:3c:d6:40:
         8e:6a:ce:12:4c:c3:04:15:3b:12:50:6b:72:31:74:1e:e1:b6:
         39:43:f5:41:02:0c:53:a7:79:a6:74:2f:30:34:bd:28:7a:71:
         7a:d0:cd:da:2e:0b:41:e0:14:22:bd:33:cd:60:68:f8:df:53:
         b3:e7:d3:f3:3e:81:22:4e:05:b1:de:38:80:2e:9b:e2:76:04:
         71:19:5a:9d:78:26:ad:08:bd:81:ad:fa:3a:73:07:cb:e8:96:
         f8:6b:ee:11:ca:0a:cf:92:99:dc:ff:64:d8:3a:f2:df:63:4b:
         bc:9e:ad:8a:8c:5c:cb:99:84:53:1a:10:af:de:d2:9a:07:85:
         96:dd:01:e1:6b:1c:b9:ce:56:de:e9:39:9d:f6:13:08:21:42:
         f4:45:35:3d:cd:d6:09:1f:29:67:34:5e:bc:b2:37:2d:3c:d8:
         10:5c:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----